TLS bare minimum